Method and apparatus implementing remote access control based on portable memory apparatus

Abstract

The invention discloses a method and a device for realizing remote access control based on a portable storage device, the method comprises that: an authentication server receives a request access message which is sent by an intelligent storage card, and the request access message comprises an identifier of the intelligent storage card, the identifier of an application server and an identifier related key; the authentication server obtains the stored identifier related key which is corresponding to the identifier of the intelligent storage card and compares with the identifier related key in the request access message, if the two are consistent, a request access response message is returned to the intelligent storage card; the application server receives a service request message which contains the identifier of the intelligent storage card and a note and is sent by the intelligent storage card, a key decryption note which is shared with the authentication server is adopted for verifying the consistency of the identifier of the intelligent storage card which is contained in the note and the identifier of he intelligent storage card which is not encrypted in the service request message, thereby providing the service for the intelligent storage card. The proposal of the invention can realize the separation of the authentication and the application, thereby alleviating the burden on the application server for carrying out the authentication of the intelligent storage card.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and device for realizing remote access control based on a portable storage device. Background technique [0002] The Internet provides organizations and individuals the ability to use computers to communicate and share data worldwide, with benefits such as accessibility, scalability, and reduced business-related costs. However, the Internet is an insecure and potentially dangerous operating environment for organizations, and as such, organizations need to maintain the necessary level of data and communication security while taking advantage of the benefits the Internet offers. [0003] At present, the method for ensuring security is: when a user logs in to a remote network, two secrets, the user name and the password, are used for authentication, and the login succeeds after the authentication is passed. However, this method is insecure, and the third party...

AI Technical Summary

Problems solved by technology

[0010] When the user accesses the network, the smart memory card directly authenticates with the application service on the network side. After the authentication is passed, the application server provides services to the smart memory card. Since the application server provides both the login process and the service to the workstation, the application The server is overloaded, causing users to log in for too long

Moreover, when multiple users log in at the same time, the application server's authentication of multiple users will increase the burden on the application server. At this time, the application server may also undertake some application services of other smart memory cards that have passed the authentication.

Not only that, but the application server direct authentication method also increases the danger of the application server, which may lead to many attacks directly targeting the application server

Images